General
-
Target
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351
-
Size
1.6MB
-
Sample
240525-ykyydsgf33
-
MD5
1fd279aa05d82c3a8f17490339c2f7d1
-
SHA1
7e815ee3d2e377d4df694b7979002b469d260cc5
-
SHA256
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351
-
SHA512
2e913e089a24c148e88435ec98f52fa3706dffef92fb47390dfd9c5bf9491a98460dae2293318f16eafa7b79ee4293f9a1f44677db8e9a4b7ad418d6989c8a31
-
SSDEEP
24576:8YFbkIsaPiXSVnC7Yp9zkNmZG8RRlnMyz32:8YREXSVMDi3C
Static task
static1
Behavioral task
behavioral1
Sample
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351
-
Size
1.6MB
-
MD5
1fd279aa05d82c3a8f17490339c2f7d1
-
SHA1
7e815ee3d2e377d4df694b7979002b469d260cc5
-
SHA256
a2c1df0f447c5adbd2e88e750a9b24cc558b387604e8f68ec7f16635bb374351
-
SHA512
2e913e089a24c148e88435ec98f52fa3706dffef92fb47390dfd9c5bf9491a98460dae2293318f16eafa7b79ee4293f9a1f44677db8e9a4b7ad418d6989c8a31
-
SSDEEP
24576:8YFbkIsaPiXSVnC7Yp9zkNmZG8RRlnMyz32:8YREXSVMDi3C
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-